Oracle Business Intelligence Publisher (October 2026 CPU)

The 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0 versions of Oracle Business Intelligence Publisher installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI...

CVE-2026-117494

Sisense’s Cloud BI Platform contains a Cross-Site Scripting (XSS) vulnerability (CWE-79) during the processing of SVG images submitted to the /api/v2/ai/sessions API. The flaw occurs when images are submitted in the data:image/svg+xml;base64 format; because the system processes script tags embedd...

CVE-2026-117494 Multiple vulnerabilities in Sisense’s Cloud BI Platform

Cross-Site Scripting XSS in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:image/svg+xml;base64. Script tags embedded in the SVG are processed when the content is rendered in the assistant window, allowing JavaScript to be executed and the displayed conte...

CVE-2026-117493 Multiple vulnerabilities in Sisense’s Cloud BI Platform

Stored cross-site scripting XSS in BloX widgets. The /api/dashboards//widgets/ API accepts HTML and JavaScript content in the ‘desc’ and ‘text’ parameters. The code entered is executed in the browser when the widget is rendered, which could compromise the confidentiality of the information...

CVE-2026-117493

Sisense's Cloud BI Platform is vulnerable to Stored Cross-Site Scripting (XSS) in BloX widgets . The /api/dashboards//widgets/ API fails to properly sanitize HTML and JavaScript content submitted via the desc and text parameters. When a widget is rendered, the injected code executes in the user's...

Sisense Cloud BI Platform cross-site scripting vulnerability

The Sisense Cloud BI Platform contains a cross-site scripting vulnerability. This vulnerability arises when processing SVG images formatted as data:image/svg+xml;base64 via the /api/v2/ai/sessions endpoint; the embedded script tags are rendered in the assistant window and can be exploited to...

EUVD-2026-106792

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

EUVD-2026-106791

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-106763

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle BI Publisher. Successful...

CVE-2026-91579

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

CVE-2026-91577

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-91528

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle BI Publisher. Successful...

CVE-2026-91579

A vulnerability exists in the Oracle BI Publisher product of Oracle Analytics, specifically within the BI Platform Security component. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to co...

CVE-2026-91577

A vulnerability exists in the BI Platform Security component of Oracle Business Intelligence Enterprise Edition (affected version 12.2.1.4.0 ) within the Oracle Analytics suite. A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful explo...

CVE-2026-91528

A vulnerability exists in the BI Platform Security component of the Oracle BI Publisher product within Oracle Analytics, specifically affecting version 12.2.1.4.0 . A low-privileged attacker with network access via HTTPS can exploit this flaw to gain unauthorized read access to a subset of access...

PT-2026-120040

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle BI Publisher. Successful...

PT-2026-120069

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

PT-2026-120068

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Oracle BI Publisher security vulnerability

Oracle BI Publisher version 12.2.1.4.0 contains a security vulnerability stemming from issues within the BI Platform Security component. This vulnerability may allow low-privilege attackers to access certain accessible data over the HTTPS network without authorization...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Platform Security component. It may allow attackers with low privileges to access through the HTTP network, to perform unauthorized updates, insertions, or...